Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wcw4-534x-p2m6

Опубликовано: 25 нояб. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

An issue was discovered in jishenghua JSH_ERP 2.3.1. The /role/addcan endpoint is vulnerable to fastjson deserialization attacks.

An issue was discovered in jishenghua JSH_ERP 2.3.1. The /role/addcan endpoint is vulnerable to fastjson deserialization attacks.

EPSS

Процентиль: 20%
0.00064
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-502

Связанные уязвимости

CVSS3: 9.8
nvd
2 месяца назад

An issue was discovered in jishenghua JSH_ERP 2.3.1. The /role/addcan endpoint is vulnerable to fastjson deserialization attacks.

EPSS

Процентиль: 20%
0.00064
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-502